CVE-2018-19281: Centreon allows SNMP trap SQL Injection
Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.27) allows SNMP trap SQL Injection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 2.8.27 - Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 18.10.0 - Upgrade
Upgrade
Centreonto a version that resolves this vulnerability.Fixed in 18.10.0 - Upgrade
Upgrade
Centreon webto a version that resolves this vulnerability.Fixed in 2.8.27
Event History
Frequently Asked Questions
What is CVE-2018-19281?
CVE-2018-19281 is a vulnerability in Centreon 3.4.x that allows SQL injection through SNMP traps.
How severe is CVE-2018-19281?
CVE-2018-19281 has a severity rating of 9.8 (Critical).
What is the affected software version of CVE-2018-19281?
Centreon versions from 3.4 to 18.10.0 are affected by CVE-2018-19281.
How can I fix CVE-2018-19281?
To fix CVE-2018-19281, update Centreon to version 18.10.0 or Centreon web to version 2.8.27.
What is the CWE ID of CVE-2018-19281?
CVE-2018-19281 is associated with CWE-89 (SQL Injection).